ByteOS Network

NVD Vulnerability Details :

CVE-2025-9983

Awaiting Analysis

Source-cvd@cert.pl

Published At-22 Sep, 2025 | 11:15

Updated At-22 Sep, 2025 | 21:22

GALAYOU G2 cameras stream video output via RTSP streams. By default these streams are protected by randomly generated credentials. However these credentials are not required to access the stream. Changing these values does not change camera's behavior. The vendor did not respond in any way. Only version 11.100001.01.28 was tested, other versions might also be vulnerable.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	7.1	HIGH	CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Type: Secondary

Version: 4.0

Base score: 7.1

Base severity: HIGH

Vector:

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE ID	Type	Source
CWE-306	Primary	cvd@cert.pl

CWE ID: CWE-306

Type: Primary

Source: cvd@cert.pl

References

Hyperlink	Source	Resource
https://cert.pl/en/posts/2025/09/CVE-2025-9983	cvd@cert.pl	N/A
https://www.galayou-store.com/g2	cvd@cert.pl	N/A

Hyperlink: https://cert.pl/en/posts/2025/09/CVE-2025-9983

Source: cvd@cert.pl

Resource: N/A

Hyperlink: https://www.galayou-store.com/g2

Source: cvd@cert.pl

Resource: N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History